Live data from Hacker News

A Dutch first: Ingenious BMW theft attempt

mrooding.me

51–60 of 325 posts

Re: A Dutch first: Ingenious BMW theft attempt

#51

I think the proper cause of action in that case was to return the car and do an old fashioned stake out with lots of beer.. I mean redbull and catch the burglars redhanded.

Way to catch some sophisticated thieves, and if they don't show up anyway. Then stop going to that dealership.

Re: A Dutch first: Ingenious BMW theft attempt

#52
post #16

I've anecdotally heard a lot of stories about the relay/replay attacks on keyless ignition systems used in many BMW models and other cars as well. No need to smash the window at all in some cases. Remarkably simple attack in principle, and probably a nightmare to explain to your insurer given there will be no evidence of a break in. Makes you wonder if you should start storing the key in a metal/RF shielded box at ho…

That's actually not hard to explain to your insurance or the police at all. This happened to me 5 weeks ago. The car was parked directly in front of my entrance door and the key was basically on the other side of that door.

The scene of my car not being where it was supposed to be was so surreal that I did not even realize it was missing the first time when I walked out the trash. I basically walked around an invisible car.

Only when I wanted to leave the house and thought, well shouldn't my car supposed to be there did it dawn on me that something is amiss.

When I went to the police, the first thing they asked me was how far my keys were away from the car. My insurance was asking the exact same thing.

Remarkably the car was found when the police in our neighboring country stopped a driver under the influence of drugs.

Getting the car back (still ongoing) was so much hassle that I almost would be happier if it would not have been found.

It goes without question that all my keys are now stored inside a metal box when not in use.

I was a bit worried that the box does not shield the signal enough. The best way I could think of to test it was to put the key inside the box and hold the box to the steering column and try to start the car. It's probably not foolproof but I hope it is enough.

Re: A Dutch first: Ingenious BMW theft attempt

#53
post #27

Reading this article is honestly a bit of a domestic culture shock for me, where does this guy live in The Netherlands? Here in downtown Amsterdam we called the police because the rear window of someone's car had just been smashed outside our office, and the police's response was "Has anyone been hurt? Nope? Then we're not coming". Meanwhile, wherever this guy lives they're sending officers because some BMW call cent…

> Here in downtown Amsterdam we called the police because the rear window of someone's car had just been smashed outside our office, and the police's response was "Has anyone been hurt? Nope? Then we're not coming".

Amsterdam currently has a big police shortage, that's why. It's not normal, it's just a problem in Amsterdam.

https://www.dutchnews.nl/news/2018/07/amsterdam-is-not-lawle...

Re: A Dutch first: Ingenious BMW theft attempt

#54
post #27

Reading this article is honestly a bit of a domestic culture shock for me, where does this guy live in The Netherlands? Here in downtown Amsterdam we called the police because the rear window of someone's car had just been smashed outside our office, and the police's response was "Has anyone been hurt? Nope? Then we're not coming". Meanwhile, wherever this guy lives they're sending officers because some BMW call cent…

The message received from the police was:

The message they passed on was that there was either a burglary attempt or that my car was involved in an accident. They gave the police the exact coordinates of my car...

So I would hope that when presented with an automated report that the car was involved in an accident along with the exact coordinates, that they would come investigate to see if the driver was injured in the accident and unable to call for help.

I can believe that if someone witnessed a car break-in, that they'd give that a lower priority and if the thief is no longer there, that they wouldn't come out at all since there's not much they can do about it other than agree "Yup, someone smashed your window, now go clean your glass off the sidewalk".

Re: A Dutch first: Ingenious BMW theft attempt

#55
post #52
post #16

I've anecdotally heard a lot of stories about the relay/replay attacks on keyless ignition systems used in many BMW models and other cars as well. No need to smash the window at all in some cases. Remarkably simple attack in principle, and probably a nightmare to explain to your insurer given there will be no evidence of a break in. Makes you wonder if you should start storing the key in a metal/RF shielded box at ho…

That's actually not hard to explain to your insurance or the police at all. This happened to me 5 weeks ago. The car was parked directly in front of my entrance door and the key was basically on the other side of that door. The scene of my car not being where it was supposed to be was so surreal that I did not even realize it was missing the first time when I walked out the trash. I basically walked around an invisib…

Well, now when that technique is well known it's another story.

It's like the case where PIN numers on credit-cards where cracked but because noone knew it could be done people where assumed to have been negligent if the thief knew the code and automatically denied any compensation.

... until they caught the guys.

Re: A Dutch first: Ingenious BMW theft attempt

#56
post #16

I've anecdotally heard a lot of stories about the relay/replay attacks on keyless ignition systems used in many BMW models and other cars as well. No need to smash the window at all in some cases. Remarkably simple attack in principle, and probably a nightmare to explain to your insurer given there will be no evidence of a break in. Makes you wonder if you should start storing the key in a metal/RF shielded box at ho…

I already do. I keep the keys to my mercedes in an rfid-blocking bag next to my bed at night, because unfortunately it's vunerable to that exact type of attack.

Re: A Dutch first: Ingenious BMW theft attempt

#57
post #33

Earlier quoted context omitted.

Maybe you could stop this attack by having an IMU in the key so it only broadcasts the unlock signal while it's being held/moved.

Many suggestions for foiling this (including some interesting Tesla specific ones, like having the screen ask for a PIN), but the simplest is to just have the key not unlock the car unless a button is pressed. Not a massive inconvenience.

Sure. Was just trying to solve the problem while keeping the same experience, which some automotive manufacturers must think is worth providing to customers.

Re: A Dutch first: Ingenious BMW theft attempt

#58
post #33

Earlier quoted context omitted.

Maybe you could stop this attack by having an IMU in the key so it only broadcasts the unlock signal while it's being held/moved.

Many suggestions for foiling this (including some interesting Tesla specific ones, like having the screen ask for a PIN), but the simplest is to just have the key not unlock the car unless a button is pressed. Not a massive inconvenience.

If you had a receiver with a nanosecond precision you can measure the distance to the key with enough accuracy that the relay attack doesn't work anymore. I don't know why manufacturers don't do that yet - I guess the parts necessary are still not available at scale yet?

I personally just keep the keys in a metallic bag at night, blocks all signals perfectly.

Re: A Dutch first: Ingenious BMW theft attempt

#59
post #16

I've anecdotally heard a lot of stories about the relay/replay attacks on keyless ignition systems used in many BMW models and other cars as well. No need to smash the window at all in some cases. Remarkably simple attack in principle, and probably a nightmare to explain to your insurer given there will be no evidence of a break in. Makes you wonder if you should start storing the key in a metal/RF shielded box at ho…

> "probably a nightmare to explain to your insurer given there will be no evidence of a break in." Is that really an issue? This isn't the first type of theft that doesn't require a break-in. Tow the car and there's no evidence either. If you say it's been stolen then it's been stolen. File the police report and that's the end of that, no? Unless they have specific reason not to believe you personally (history of fra…

True, it's probably not _that_ hard, but I doubt it's all that great an experience either. At least with towing there is arguably a significantly higher chance of witnesses or CCTV footage of a number plate, and on most modern luxury vehicles will trigger the alarm. With this attack it looks like the driver simply opened the door and drove off as if they were the owner, which is far less likely to arouse suspicion in most neighborhoods I would imagine.

Re: A Dutch first: Ingenious BMW theft attempt

#60
In Sacramento car theft is a big problem. The scheme there is to steal a nice car, purchase a wrecked one at a lot (salvaged) for pennies, then swap the vins and serial numbers with the salvaged car then sell it. It works really well. So if you buy a used car in sacramento there is a %90 chance it has a salvaged title.
Post reply on HN